APTNorth Korea Hits macOS with Fake Updates and a Backdoor That Empties Crypto Wallets
North Korean hackers target macOS via fake update ads, deploying a Node.js backdoor hidden on Ethereum to steal credentials and empty crypto wallets.
APTNorth Korean hackers target macOS via fake update ads, deploying a Node.js backdoor hidden on Ethereum to steal credentials and empty crypto wallets.
APTAmazon attributes npm supply chain attacks on debug, chalk, and axios to North Korean group Sapphire Sleet, linking three campaigns over twelve months.
APTLaundry Bear APT exploits an Exchange OWA zero-day (CVE-2026-42897) deploying the OWAReaper backdoor for invisible espionage and persistent mailbox access.
APTMinnesota water systems faced an OT cyberattack exploiting cellular modems. The incident disrupted SCADA controls, forcing manual plant operations.
APTRussian FSB charged Telegram CEO Pavel Durov for facilitating terrorism via malicious chatbots, causing mass arrests and an almost total app block.
APTExplore 2026 recommendations for securing critical infrastructure, OT, and AI. Learn about Zero Trust, ATG vulnerabilities, and AI supply chain risks.
APTIranian APT Nimbus Manticore unveils a new toolkit featuring NightLedger, BridgeHead, and ArcBridge, targeting entities in the Middle East and Africa.
APTUAC-0099 APT targets Ukraine via a trojanized Notepad++ plugin delivering LUNCHPOKE and BURNYBEAR payloads for espionage and cyber sabotage.
APTAn AI agent named Hermes in YOLO mode automated a cyberattack on the Thai Ministry of Finance, using custom tools and exposing internal vulnerabilities.